arb-injection

Name: arb-injection
Availability: InStock
Author: BringYourOwnBot

Scan EVM smart contract bytecode for arbitrary call injection vulnerabilities.

Updated Feb 5, 2026

Search Tags:#security #vulnerability #auditing #blockchain #smart contract #evm

Ready to run

npx skills add https://github.com/BringYourOwnBot/byocb --skill arb-injection

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: arb-injection
Source: https://github.com/BringYourOwnBot/byocb/tree/main/arb-injection
Command: npx skills add https://github.com/BringYourOwnBot/byocb --skill arb-injection

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and alert users about potential arbitrary call injection vulnerabilities in EVM smart contracts, acting as an automated security auditor.

Core Features & Use Cases

Real-time Monitoring: Continuously scans for newly deployed contracts on various EVM-compatible chains.
Vulnerability Detection: Analyzes contract bytecode for dangerous CALL/DELEGATECALL patterns.
Alerting: Notifies users immediately about critical or high-risk findings, with options to filter false positives.
Manual Scanning: Allows on-demand scanning of specific contract addresses or local bytecode files.

Quick Start

Monitor the BSC chain for new contract deployments and scan for vulnerabilities.

Frequently Asked Questions about arb-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan EVM smart contracts for arbitrary call injection vulnerabilities?▼

Scanning EVM smart contracts for arbitrary call injection vulnerabilities involves analyzing bytecode for dangerous CALL and DELEGATECALL patterns. The Skill monitors blockchain deployments and provides real-time alerts for critical findings.

Can I manually scan a specific contract address for vulnerabilities?▼

Yes, on-demand manual scanning is supported for specific contract addresses or local bytecode files. This allows targeted vulnerability detection outside of continuous real-time blockchain monitoring.

Does this vulnerability scanner filter out false positives during smart contract auditing?▼

Yes, false positives are filtered using known safe patterns and contract types. This ensures that the security auditing alerts focus strictly on genuine critical and high-risk vulnerability findings.

What is arbitrary call injection in blockchain security?▼

Arbitrary call injection in blockchain security is a smart contract vulnerability where dangerous CALL or DELEGATECALL bytecode patterns allow unintended execution. Detecting it requires continuous EVM network monitoring and bytecode analysis.

How do I monitor EVM-compatible chains for newly deployed vulnerable contracts?▼

To monitor EVM-compatible chains, the Skill continuously scans for newly deployed contracts, analyzes their bytecode, and issues real-time alerts when high-risk arbitrary call injection vulnerabilities are detected.

Are there limitations when detecting CALL and DELEGATECALL patterns in bytecode?▼

Detection limitations arise when filtering false positives based on known safe patterns and contract types. Complex or unknown contract structures may require manual scanning to verify critical arbitrary call injection findings.